Privacy Policy
Effective Date: May 12, 2026
1. Who We Are
Human Spaceflight Analog Connect is operated by Interstellar Performance Labs / Fort Hill Group. References to "we", "us", or "our" in this policy mean Interstellar Performance Labs / Fort Hill Group.
For data protection enquiries, contact us at: privacy@astronautconnect.com.
2. What Data We Collect
We collect personal data in the following categories:
Account & Identity Data
- First and last name, email address, and password (hashed)
- Country of residence
- Profile photo (uploaded by you)
- Account type (Candidate, Recruiter, Habitat Owner, Enthusiast)
Professional Profile Data (Candidates only)
- Personal statement, education history, work experience
- Past analog missions, certifications
- Uploaded documents (CVs, certificates, etc.)
- Career aspirations and contact preferences
Payment Data
- Registration fee payment status and date (we do not store full card numbers)
- Payment processing is handled by a third-party provider subject to their own privacy policy
Usage & Technical Data
- IP address, browser type, device identifiers
- Pages visited, features used, time and date of access
- Authentication tokens managed by Firebase Authentication (Google)
Communications Data
- Mailing list name and email address
- Any messages you send us directly
3. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Create and manage your account | Contract performance |
| Authenticate your identity and secure your account | Contract performance / Legitimate interest |
| Display your profile to recruiters or habitat owners (with your consent settings) | Consent |
| Process registration payments | Contract performance |
| Send service-related emails (password reset, account updates) | Contract performance |
| Send marketing emails if you subscribed to our mailing list | Consent |
| Improve and secure the platform | Legitimate interest |
| Comply with legal obligations | Legal obligation |
4. Data Sharing & Disclosure
We do not sell your personal data. We share your data only in the following circumstances:
Within the Platform
- Candidate profiles are shared with Recruiters and Habitat Owners only according to your contact settings
- Habitat listings are public and visible to all users
- Admins can view all user data for moderation purposes
Third-Party Service Providers
- Google Firebase (Google LLC) — authentication, database, file storage. Data may be processed in the United States. Google is certified under the EU-US Data Privacy Framework.
- Google AI (Gemini) — used to generate candidate summaries on request. Only data you submit for that feature is sent. See Google's Privacy Policy.
- Payment Processor — your payment data is handled directly by our payment provider. We receive only payment status.
Legal Requirements
We may disclose your data if required by law, court order, or to protect the rights, safety, and property of our users or the public.
5. International Transfers
Our services are hosted on Google Cloud infrastructure, which may process data in the United States and other countries. When we transfer data from the European Economic Area (EEA) or the UK, we rely on:
- Google LLC's participation in the EU-US Data Privacy Framework
- Standard Contractual Clauses (SCCs) where applicable
Canadian users' data is handled in accordance with PIPEDA and applicable provincial privacy legislation.
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
| Right | Who It Applies To |
|---|---|
| Access — request a copy of your personal data | EEA, UK, Canada, California (CCPA) |
| Correction — request we correct inaccurate data | EEA, UK, Canada, California |
| Deletion / Right to be Forgotten | EEA, UK, California (CCPA) |
| Restrict or object to processing | EEA, UK |
| Data portability — receive your data in a structured format | EEA, UK |
| Withdraw consent at any time (without affecting prior processing) | All users |
| Opt out of sale of personal information | California (CCPA) — note: we do not sell data |
| Lodge a complaint with a supervisory authority | EEA, UK, Canada |
To exercise any right, email us at privacy@astronautconnect.com. We will respond within 30 days (or sooner as required by applicable law).
7. Data Retention
- Account data is retained for as long as your account is active, plus up to 3 years after closure for legal/audit purposes
- Mailing list data is retained until you unsubscribe
- Uploaded files are retained until you delete them or your account is closed
- Usage logs are retained for up to 12 months
8. Security
We use industry-standard security measures including encrypted data transmission (TLS), Firebase security rules to enforce access controls, and hashed passwords. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
9. Children's Privacy
Human Spaceflight Analog Connect is not directed to children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has submitted data to us, contact us at privacy@astronautconnect.com and we will delete it promptly.
10. Cookies
We use essential cookies and browser storage to keep you logged in and remember your session. See our Cookie Policy for full details.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top and, for material changes, notify you by email or a prominent notice in the app. Continued use of the platform after changes constitutes acceptance of the updated policy.
12. Contact Us
Interstellar Performance Labs / Fort Hill Group
Email: privacy@astronautconnect.com
If you are in the EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority. In Ireland, this is the Data Protection Commission. In the UK, the Information Commissioner's Office (ICO).